INFO: trying to register non-static key. the code is fine but needs lockdep annotation. turning off the locking correctness validator. CPU: 1 PID: 13243 Comm: syz-executor.3 Not tainted 4.14.295-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 register_lock_class+0x389/0x1180 kernel/locking/lockdep.c:768 __lock_acquire+0x167/0x3f20 kernel/locking/lockdep.c:3378 lock_acquire+0x170/0x3f0 kernel/locking/lockdep.c:3998 down_read+0x36/0x80 kernel/locking/rwsem.c:24 F2FS-fs (loop4): Found nat_bits in checkpoint nilfs_bmap_lookup_at_level+0x6b/0x380 fs/nilfs2/bmap.c:77 nilfs_bmap_lookup fs/nilfs2/bmap.h:179 [inline] nilfs_mdt_submit_block.constprop.0+0x152/0x970 fs/nilfs2/mdt.c:151 nilfs_mdt_read_block+0x7c/0x320 fs/nilfs2/mdt.c:184 nilfs_mdt_get_block+0xc7/0xb90 fs/nilfs2/mdt.c:259 nilfs_palloc_get_block+0xb2/0x250 fs/nilfs2/alloc.c:225 nilfs_palloc_get_entry_block+0x17d/0x230 fs/nilfs2/alloc.c:327 nilfs_ifile_get_inode_block+0xb4/0x150 fs/nilfs2/ifile.c:152 __nilfs_read_inode fs/nilfs2/inode.c:492 [inline] nilfs_iget+0x1c2/0x810 fs/nilfs2/inode.c:601 nilfs_get_root_dentry+0x24/0x1f0 fs/nilfs2/super.c:918 nilfs_fill_super fs/nilfs2/super.c:1092 [inline] nilfs_mount+0x984/0xd00 fs/nilfs2/super.c:1331 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a30 fs/namespace.c:2905 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f24b0a46ada RSP: 002b:00007f24af3b7f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f24b0a46ada RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f24af3b7fe0 RBP: 00007f24af3b8020 R08: 00007f24af3b8020 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 R13: 0000000020000100 R14: 00007f24af3b7fe0 R15: 0000000020014060 NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds NILFS (loop1): unrecognized mount option "w" kasan: CONFIG_KASAN_INLINE enabled kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 13243 Comm: syz-executor.3 Not tainted 4.14.295-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 task: ffff88809c6ee0c0 task.stack: ffff888049a50000 RIP: 0010:nilfs_bmap_lookup_at_level+0xa5/0x380 fs/nilfs2/bmap.c:78 RSP: 0018:ffff888049a57750 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff88804a339738 RCX: 0000000000000000 RDX: dffffc0000000000 RSI: 1ffff1100934ae93 RDI: ffff88804a3397f8 RBP: ffff888049a57818 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: ffff88809c6ee0c0 R12: 0000000000000002 R13: 1ffff1100934aeeb R14: ffff88804a339770 R15: 0000000000000001 FS: 00007f24af3b8700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555557139708 CR3: 00000000ab23b000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: nilfs_bmap_lookup fs/nilfs2/bmap.h:179 [inline] nilfs_mdt_submit_block.constprop.0+0x152/0x970 fs/nilfs2/mdt.c:151 nilfs_mdt_read_block+0x7c/0x320 fs/nilfs2/mdt.c:184 nilfs_mdt_get_block+0xc7/0xb90 fs/nilfs2/mdt.c:259 nilfs_palloc_get_block+0xb2/0x250 fs/nilfs2/alloc.c:225 nilfs_palloc_get_entry_block+0x17d/0x230 fs/nilfs2/alloc.c:327 nilfs_ifile_get_inode_block+0xb4/0x150 fs/nilfs2/ifile.c:152 __nilfs_read_inode fs/nilfs2/inode.c:492 [inline] nilfs_iget+0x1c2/0x810 fs/nilfs2/inode.c:601 nilfs_get_root_dentry+0x24/0x1f0 fs/nilfs2/super.c:918 nilfs_fill_super fs/nilfs2/super.c:1092 [inline] nilfs_mount+0x984/0xd00 fs/nilfs2/super.c:1331 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a30 fs/namespace.c:2905 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7f24b0a46ada RSP: 002b:00007f24af3b7f88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f24b0a46ada RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f24af3b7fe0 RBP: 00007f24af3b8020 R08: 00007f24af3b8020 R09: 0000000020000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000020000000 R13: 0000000020000100 R14: 00007f24af3b7fe0 R15: 0000000020014060 Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 69 02 00 00 48 8b 83 c0 00 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 c1 48 c1 e9 03 <80> 3c 11 00 0f 85 32 02 00 00 4c 89 e6 48 89 e9 44 89 fa 48 89 RIP: nilfs_bmap_lookup_at_level+0xa5/0x380 fs/nilfs2/bmap.c:78 RSP: ffff888049a57750 NILFS (loop1): unrecognized mount option "w" print_req_error: I/O error, dev loop1, sector 0 Buffer I/O error on dev loop1, logical block 0, async page read NILFS (loop1): unrecognized mount option "w" ---[ end trace a42e702f30b1ec5d ]--- ---------------- Code disassembly (best guess), 1 bytes skipped: 0: df 48 89 fisttps -0x77(%rax) 3: fa cli 4: 48 c1 ea 03 shr $0x3,%rdx 8: 80 3c 02 00 cmpb $0x0,(%rdx,%rax,1) c: 0f 85 69 02 00 00 jne 0x27b 12: 48 8b 83 c0 00 00 00 mov 0xc0(%rbx),%rax 19: 48 ba 00 00 00 00 00 movabs $0xdffffc0000000000,%rdx 20: fc ff df 23: 48 89 c1 mov %rax,%rcx 26: 48 c1 e9 03 shr $0x3,%rcx * 2a: 80 3c 11 00 cmpb $0x0,(%rcx,%rdx,1) <-- trapping instruction 2e: 0f 85 32 02 00 00 jne 0x266 34: 4c 89 e6 mov %r12,%rsi 37: 48 89 e9 mov %rbp,%rcx 3a: 44 89 fa mov %r15d,%edx 3d: 48 rex.W 3e: 89 .byte 0x89